CVE-2026-112044

A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...

EUVD-2026-104053

A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...

CVE-2026-112044 dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication

A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...

CVE-2026-112044 dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication

A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...

CVE-2026-112044

A security vulnerability exists in dotnet eShop (up to commit 913acea66708a59595351174cee9b29f37179d29). The flaw is located in the AddApplicationServices function within the file src/Catalog.API/Extensions/Extensions.cs of the Catalog API component. This vulnerability allows for improper authent...

CVE-2026-112044: Improper Authentication

A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...

CVE-2026-105444

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

CVE-2026-105444 dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

EUVD-2026-92801

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

CVE-2026-105444

A security flaw exists in dotnet eShop .NET 8 within the Ordering API component. Specifically, the GetOrderAsync function in the file src/Ordering.API/Apis/OrdersApi.cs is vulnerable to resource injection (CWE-99). By manipulating the OrderNumber argument, an attacker can achieve improper control...

CVE-2026-105444 dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

CVE-2026-105444: Improper Control of Resource Identifiers

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

PT-2026-106230

Name of the Vulnerable Software and Affected Versions dotnet eShop version .NET 8 Description An issue exists in the Ordering API component within the GetOrderAsync function located in the src/Ordering.API/Apis/OrdersApi.cs file. A remote attacker can manipulate the OrderNumber argument to cause...